Chapter 4: Open Source Ninja

This chapter will take you, the reader, through the art of Google-Fu, researching a company, facility, process, control, contract, or other form of publicly shared information. This allows you to understand how to obtain as much information pre-engagement as possible. The important part is that time and time again, employees like to publish information about their organization. Information that is not normally shared by a company can be items such as firewalls used for segmentation, endpoint protection, network access control (NAC) information, intrusion detection system (IDS) products implemented, and many more revealing strategies. However, with a drive to be ever more connected, websites such as LinkedIn can reveal what an organization may be utilizing.

Now that we have gleaned some amazing details about the organization that we are going after, we can ask the question: What is the side load? If we know the company is Rockwell, can we create accounts...